Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
File: 9YmCO6FHWAB83oc69L9H_Zw5c3s.mft (raw, json)
Hash identifier: bv4NA5otuZMHGEtXgzirAO6hpQ463vIaRj6W/JYRsC0=
Subject key identifier: C3:74:B6:4E:30:AA:B6:A7:E4:FE:30:20:AE:E7:EB:99:08:FA:49:84
Authority key identifier: F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
Certificate issuer: /CN=f589823ba14758007cde873af4bf47fd9c39737b
Certificate serial: 019A71B86A2912440CE5B3C479742C63D397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
Manifest number: 1200
Signing time: Tue 11 Nov 2025 07:01:42 +0000
Manifest this update: Tue 11 Nov 2025 07:01:42 +0000
Manifest next update: Wed 12 Nov 2025 07:01:42 +0000
Files and hashes: 1: 9YmCO6FHWAB83oc69L9H_Zw5c3s.crl (hash: DtHRx461F/kvd8aN7uC4B0F/T2yMHhGbMt0Bzs3DxfY=)
2: cwCE2hhjusn86QvOu2pcA9KTbHA.roa (hash: NxYhK1mgxO/73LOxU0Rf/stDIA61i1imewNDavbu5Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:6a:29:12:44:0c:e5:b3:c4:79:74:2c:63:d3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f589823ba14758007cde873af4bf47fd9c39737b
Validity
Not Before: Nov 11 07:01:42 2025 GMT
Not After : Nov 12 07:01:42 2025 GMT
Subject: CN=c374b64e30aab6a7e4fe3020aee7eb9908fa4984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:eb:25:09:20:6d:f2:58:a4:9b:5c:82:6a:a1:
2e:61:65:ed:72:fa:b4:fe:12:10:79:04:75:ad:eb:
1f:2d:cd:0e:5f:19:86:6d:a9:2e:d3:85:23:aa:15:
68:0e:6d:00:71:c3:38:1c:a2:29:c3:19:00:96:8f:
35:be:e1:aa:a1:a3:6e:2e:a4:dc:49:29:9a:c3:c3:
14:c6:31:8e:55:72:f2:96:9b:20:f4:21:68:a7:3d:
17:cc:d2:4a:ff:8d:e8:29:61:50:08:b6:e4:85:f5:
a6:67:a8:34:04:cc:da:a8:0b:0d:a1:7b:b1:20:95:
0e:8a:f6:21:b1:a0:aa:7f:81:0a:93:9e:22:df:06:
d5:f3:8c:59:68:28:8c:c4:ce:1a:75:31:fa:d4:ca:
92:70:73:29:63:df:b8:b2:ec:f6:0d:0c:51:87:5f:
c0:b8:10:67:0e:f0:4b:b3:6d:bd:03:48:b0:73:08:
26:63:9a:ee:b9:41:ed:1d:08:c1:a0:a5:3e:c9:28:
c5:6c:12:2e:0d:f9:7a:d9:bd:c5:3e:2a:21:6d:6d:
68:da:36:0b:db:0e:bb:c7:39:d6:83:ca:78:5a:85:
88:46:07:83:d6:de:4a:4c:0e:0f:78:29:d5:6e:b0:
82:46:3b:7b:ae:94:af:69:29:f7:0d:f8:8f:50:13:
65:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:74:B6:4E:30:AA:B6:A7:E4:FE:30:20:AE:E7:EB:99:08:FA:49:84
X509v3 Authority Key Identifier:
keyid:F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:8b:08:18:8e:4c:39:db:8f:b7:ca:ef:11:8a:6c:5d:d6:e1:
35:dc:3b:96:97:78:c4:d1:77:0c:08:ce:9e:d4:0e:ac:fd:45:
53:0e:de:71:58:b6:82:60:ce:5a:c9:8b:e7:21:dd:bd:33:e8:
b1:25:ca:d8:28:9a:c1:63:aa:c8:97:d5:65:55:1d:ba:19:94:
00:9d:56:cf:c5:c5:78:ae:ae:f9:3f:83:f2:3e:0b:16:a1:ef:
05:84:9a:66:11:f3:2d:ae:02:39:49:e9:0d:8b:0a:cd:41:8c:
56:80:b1:f4:84:f6:36:12:b8:c6:dc:ad:ba:22:be:14:15:c8:
0c:fe:a4:18:84:a8:a6:cd:47:d1:a2:42:73:25:98:a1:41:41:
e6:f4:24:fd:5c:07:f9:a0:a7:e4:8d:86:3c:c6:9e:ba:27:a9:
4c:24:00:8b:41:88:25:e0:a1:9c:52:b9:5a:bb:17:d0:e6:2a:
96:de:2f:e8:e7:4d:63:6f:c8:19:29:aa:8f:a2:fc:d7:87:b7:
fc:92:15:bb:3e:8d:34:d0:dd:b8:05:cf:ea:63:a0:76:b1:56:
9e:e9:95:73:aa:97:e4:b9:60:e8:09:c1:eb:82:e8:08:b9:fd:
1e:c2:d6:19:9b:d6:ff:16:e7:31:a5:7d:bd:92:56:68:62:0c:
6c:ae:da:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:09 2025 by rpki-client